<Files ~ '.php'>
    Deny from all
</Files>